Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Loader.exe

windows7-x64

10

Loader.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Loader.exe

  • Size

    268KB

  • Sample

    240821-n61c8sxdkc

  • MD5

    21b8ad2326ac8257a348632169f913d0

  • SHA1

    82f95a9388c43724c8f9c212bc760fb11e01a1b8

  • SHA256

    768ee0a4a5e1919a82e432e605a8c525d4c82081b13595a8b1a612d38067d951

  • SHA512

    32f87225250abe11d311609f75dc171b3acd1670f3a686de08f03bdf9672479dfe41adb1cbdba4f0d28d280cd4f61a9a39051fa02241ad9f5127a384c6785ba5

  • SSDEEP

    6144:n4LNPX/wMMxO17+EcVDszbttfG69ckKmvxv0f/Nq:n4LJPwMMxa5cVDsP7fGLfWL

Score
10/10
lummadiscoverystealer

Malware Config

Extracted

Family

lumma

C2

https://twilightsizp.shop/api

https://potentioallykeos.shop/api

https://interactiedovspm.shop/api

https://charecteristicdxp.shop/api

https://cagedwifedsozm.shop/api

https://deicedosmzj.shop/api

https://southedhiscuso.shop/api

https://consciousourwi.shop/api

https://tenntysjuxmz.shop/api

Targets

    • Target

      Loader.exe

    • Size

      268KB

    • MD5

      21b8ad2326ac8257a348632169f913d0

    • SHA1

      82f95a9388c43724c8f9c212bc760fb11e01a1b8

    • SHA256

      768ee0a4a5e1919a82e432e605a8c525d4c82081b13595a8b1a612d38067d951

    • SHA512

      32f87225250abe11d311609f75dc171b3acd1670f3a686de08f03bdf9672479dfe41adb1cbdba4f0d28d280cd4f61a9a39051fa02241ad9f5127a384c6785ba5

    • SSDEEP

      6144:n4LNPX/wMMxO17+EcVDszbttfG69ckKmvxv0f/Nq:n4LJPwMMxa5cVDsP7fGLfWL

    Score
    10/10
    lummadiscoverystealer

    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks